Comment by TZubiri

I don't think I need to tell hacker news this, but don't scan that qr code with phone.

The only way HN is going to do that is by opening that link with either a js disabled browser and then opening the qr with a sandboxed android emulator.